Skip to main content
← All capabilities
Available now

Platform capability · SCIM 2.0 Provisioning

Your customers’ IT teams manage user accounts from their own directory

User provisioning through your customers’ own identity providers

SCIM 2.0 provisioning endpoints for each organization. Customers connect Okta, Microsoft Entra ID or OneLogin to keep users, groups and memberships in sync. The service provides the standard SCIM endpoints for discovery, users, groups, bulk operations and the current user.

Built in

What you get

  • SCIM 2.0 endpoints for users, groups, bulk operations and the current user
  • Standard SCIM discovery endpoints
  • A separate SCIM endpoint and access token for each organization
  • People who join, change role or leave are handled without manual work by IT
  • Directory groups mapped to roles, so permissions are assigned automatically
  • Attribute mapping that can be set for each organization
  • Filtering, paging and sorting as the SCIM standard defines them
  • An audit trail for every SCIM operation
  • A test mode in which IT teams can try their mappings without changing anything
  • Works with Okta, Microsoft Entra ID, OneLogin, JumpCloud and Google Workspace
Under the hood

How it works

Enterprise customers expect SCIM

Enterprise procurement often requires SCIM. IT teams prefer not to manage another set of accounts by hand. They want their own identity provider to decide who has an account and what each person can do. SCIM support removes one of the slower steps in an enterprise deployment.

Map directory groups to platform roles

SCIM groups map to roles in the platform. When IT adds someone to "billing-admins" in Microsoft Entra ID, that person gets the billing-admin role in the platform at the next sync. When IT removes them, the role is taken away. This needs no support tickets and no manual account work, and people who leave do not keep access.

Want a deeper walkthrough of SCIM 2.0 Provisioning?

A solution architect will demo the live service against your domain model.

Get a deployment assessment